Control Types

Key concepts To remember:

Control types include:

Technical Controls – Examples:

• Firewalls
• IDS
• Antivirus
• ID and Auth software solutions
• Encryption
• etc.

Physical Controls – Examples:

• Gates
• Fences
• CC TV
• Doors
• Locks
• Security Guard
• Dogs
• Cable Locks
• Man traps

Control purposes or functionalists:

• Deterrent – intended to discourage a attacker
• Preventative – Intended to keep a incident from happening
• Corrective – Fixes components or systems after the incident has happened
• Recovery – Restores normal operations to environment
• Detective – Intended to detect and/or ID a incident and or attacker
• Compensating – Alternative control to compensate for vulnerability.

Tags: Certification, CISSP, Information Security, Information Security Governance And Risk Mgnt, Study